...

1. Obtain the BloxOne Threat Defense and BloxOne DDI licenses from Infoblox.
2. Deploy BloxOne DDI, as described in Deploying BloxOne DDI.
3. Enable the DNS forwarding proxy and BloxOne DDI DNS services based on your business requirements, as described in Viewing and Modifying Host Configuration Configuring Services.

The following sections describe the supported configurations when you have DNS forwarding proxy and BloxOne DDI DNS on the same host.

...

• The DNS forwarding proxy, not BloxOne DDI DNS, provides DNS service to all DNS clients.
• The DNS forwarding proxy listens on port 53.
• The DNS forwarding proxy returns NXDOMAIN, if you have set up the security policy to block certain domains on BloxOne Threat Defense Cloud. For information about BloxOne Threat Defense Cloud, see About BloxOne Threat Defense Cloud.

Enabling DNS Forwarding Proxy and BloxOne DDI DNS Services

...